dsh-pihuo-plugins: Skill for Claude Code

.agents/skills/dsh-plugin-review/SKILL.md

dsh-plugin-review is a skill for Claude Code, Codex from xun404/dsh-pihuo-plugins. It costs 76 tokens per session (1,031 once invoked), scanned A, original, MIT.

A review checklist for DeepSeek Harness plugins, which are add-ons built for that coding-agent framework.

In plain words
What is it for?
Use it to audit a plugin or bundle, checking its structure, configuration, tools, patches, naming, and reversibility against the repository's rules.
Why use it?
It helps find convention and runtime problems before a plugin is accepted, such as missing dependencies, unsafe cleanup, or incorrect configuration.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents).

This is xun404/dsh-pihuo-plugins's own configuration. It tells Claude Code and Codex how to work on dsh-pihuo-plugins itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything dsh-pihuo-plugins configures →

Reuse

Borrowing it

Nothing to install: this file belongs to xun404/dsh-pihuo-plugins. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xun404/dsh-pihuo-plugins/main/.agents/skills/dsh-plugin-review/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/xun404/dsh-pihuo-plugins

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dsh-plugin-review

README.md
[![agentmods](https://agentmods.dev/badge/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review/github.svg)](https://agentmods.dev/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review)
Your own site
<a href="https://agentmods.dev/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review"><img src="https://agentmods.dev/badge/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for dsh-plugin-review

Your own site · 80×15
<a href="https://agentmods.dev/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review"><img src="https://agentmods.dev/badge/skills/xun404/dsh-pihuo-plugins/dsh-plugin-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 76 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,031 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00076 $0.01031
Opus 5 $0.00038 $0.00515
Sonnet 5 $0.00015 $0.00206
Haiku 4.5 $0.00008 $0.00103

Measured 9d ago against content hash 50d689e0910d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

dsh-plugin-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/dsh-plugin-review/SKILL.md · 83 lines

What it actually says

审查 dsh 插件

只报告违反本仓库技能的问题。规则正文在对应技能,这里不下第二份定义。先读改动与插件根目录的 package.jsoncordis.patch.yml、入口模块。

对照源码:../deepseek-harness(若存在)。

流程

  1. 判定形态:工具 / 服务 / 适配器 / 钩子 / Client / 纯 bundle。选错形态本身就是 finding。
  2. 按下面清单逐项核对,每条 finding 写:位置、违反的规则(链到技能)、怎么改。
  3. 区分错误(必须改)与建议(规范倾向)。
  4. 不要评审 harness 第一方风格差异(i18n yaml、invariant 文件等),除非树外包也声明要跟第一方门禁。

清单

形态与归属 — conventions

  • 新行为挂在已有扩展点,没有改 agent loop / 没有旁路喂模型。
  • 模型可见输入能从会话日志重建。
  • 该拆 seam 时 Provider 与 Consumer 不互相依赖。
  • 包名、ctx key、工具名、事件名符合命名表。
  • 没有把产品功能做成 cordis_define 动态包。
  • 导出符号与非显然边界有准确 JSDoc;没有过时或复述式注释(comments)。

运行时 — runtime

  • 入口是函数 / { apply } / Service 之一;有 name
  • inject 覆盖 apply 里读的必需服务;可选的用 ctx.get
  • 无模块顶层副作用。
  • 外部资源在 ctx.effect;有序清理在同一个 disposer。
  • Waterfall 观察者调用 next();政策插件的短路是故意的。
  • Config 是 Schemastery(Standard Schema),不是普通对象。
  • 可调超时/路径/开关在 Config 里,能在 patch 改掉。

工具(若有)— templates

  • defineTool:规范值 + output.renderexecute 尊重 exec.signal
  • 政策不在 execute 里。
  • presentCall / presentResult 若存在则是纯函数。

组装 — compose

  • dsh.bundle.patch,且 patch 在 files 里。
  • patch id 稳定;name 是包名(不是作者机器路径)。
  • 覆盖已有行时重述完整 config
  • cordis 与所用 Definition 在 peerDependencies
  • TypeScript 包有自包含 prepare,或只发预构建产物。

浏览器半(若有)— client

  • 声明 dsh.client + exports["./client"],且 Host 行会挂上该包。
  • ./client__ModuleLoader__.load CJS factory,id 等于包名;react external。
  • 只通过 slots.register 组合;组件不碰 ctx
  • ./client 没有多余值导出,没有跨插件 import 组件。
  • 没有假设自己会出现在内置设置白名单里。

输出格式

## 结论
<一句话:可以合并 / 先改错误>

## 错误
- `path:line` — <规则链接> — <改法>

## 建议
- ...

## 已核对且通过
- <短列表>
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 83 lines · 76 tokens per session scan A 50d689e0910d

Subscribe to this mod's changes

dsh-plugin-review is a skill published in the GitHub repository xun404/dsh-pihuo-plugins (2 stars, last pushed 23d ago), licensed MIT. It adds 76 tokens to every session and 1,031 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.